Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB1714CA90E111F182B362DBCE1D38B0.roa
File: DB1714CA90E111F182B362DBCE1D38B0.roa (raw, json)
Hash identifier: cQi/tmgkmN/ZiIxT9h4WqWDygvMnN7elkwVg3ZQjvy0=
Subject key identifier: 90:14:EC:A5:7D:42:FE:37:FC:EE:3C:1E:BD:39:BD:0A:EC:EA:A6:08
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 1154
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB1714CA90E111F182B362DBCE1D38B0.roa
Signing time: Wed 05 Aug 2026 15:25:15 +0000
ROA not before: Wed 05 Aug 2026 15:25:11 +0000
ROA not after: Fri 28 Sep 2029 15:25:11 +0000
asID: 203999
IP address blocks: 161.123.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 17 Aug 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4436 (0x1154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 5 15:25:11 2026 GMT
Not After : Sep 28 15:25:11 2029 GMT
Subject: CN=6a7355da-1b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:66:13:6d:86:94:02:25:ff:77:96:72:50:
d7:91:cc:61:fa:2d:e3:75:ff:1a:81:da:4d:42:b7:
33:fb:af:0f:2a:3d:c8:42:f3:3d:a8:41:94:24:a7:
1a:95:e5:28:35:d5:d9:22:c4:3a:28:05:49:4b:be:
81:b2:e5:ef:f6:11:8d:43:b8:06:28:aa:bc:80:17:
3e:3f:a4:7e:9a:1c:c0:aa:f3:1a:9e:d3:86:91:b9:
1e:9c:29:db:26:41:b9:cb:92:6b:da:a6:f5:d3:a0:
2d:ae:4d:e4:fc:45:66:9d:4a:d5:fc:21:bf:47:f7:
b2:69:f3:71:7d:64:10:21:f3:90:b0:e6:60:ba:80:
b7:96:04:24:71:88:7b:b2:d0:b3:b6:1c:7b:79:62:
5f:8d:0f:af:9a:c0:ae:29:21:83:85:91:9b:e3:33:
11:f8:ae:66:67:bd:b1:0b:d8:16:72:12:9f:52:16:
69:5e:d2:d4:e3:4b:44:76:4f:68:3d:c8:cd:35:63:
53:dc:ad:73:d3:33:d9:6a:60:d2:ec:0d:dd:cf:9a:
e6:1b:0c:e5:67:81:44:60:33:fe:78:17:59:81:20:
e0:b6:3e:12:ff:a8:1a:c8:ed:03:75:10:66:eb:15:
2a:12:71:30:ad:a9:fd:9c:40:e1:82:ad:68:fe:b6:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:14:EC:A5:7D:42:FE:37:FC:EE:3C:1E:BD:39:BD:0A:EC:EA:A6:08
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB1714CA90E111F182B362DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:b6:f5:1e:d8:5b:ce:91:1a:79:17:e0:e6:75:f6:3f:2f:83:
6c:8b:42:d2:65:ff:01:9b:72:24:e5:d3:62:c4:fd:d4:f5:9a:
2e:56:28:a6:fb:0f:bc:bd:2c:79:46:d0:8b:e8:13:55:c3:27:
ba:c7:da:8a:5b:f3:8f:aa:a3:4e:7e:ef:45:e4:33:45:66:75:
21:66:d4:e7:e7:88:69:c5:b9:4d:7e:51:0d:fc:01:17:6d:cc:
32:f2:60:93:c5:aa:ef:bc:45:3b:ff:12:f1:25:83:8f:b0:aa:
36:48:b2:13:22:9b:65:06:64:80:80:0c:8f:6e:a0:af:d0:72:
f2:1d:52:e4:89:5f:4e:fd:01:59:29:39:f1:d1:1e:8d:1e:f8:
08:8d:9a:57:0e:94:13:30:4e:41:2f:2c:11:8f:3a:10:e9:54:
2e:69:97:a3:43:bd:b4:00:4a:e8:d1:26:d9:fd:6b:60:bd:ad:
94:8a:47:bc:53:fa:c0:af:dc:6d:a6:5a:36:a4:6f:76:2b:c0:
09:4b:3d:f2:c9:bf:06:24:2b:ce:45:5c:ff:e6:28:1a:b4:5d:
cf:4f:de:cf:81:9f:63:31:c0:cd:a4:ec:5d:f2:c4:92:11:fb:
17:7a:bb:63:c9:02:ca:2f:4b:dc:6a:bd:d5:c4:8a:d1:f4:73:
6b:9b:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:53:31 2026 by rpki-client